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Abstract. Developing suitable formal semantics can be of great help 
in the understanding, design and implementation of a programming lan- 
guage, and act as a guide for software development tools like analyzers 
or partial evaluators. In this sense, full abstraction is a highly desirable 
property, indicating a perfect correspondence between the semantics and 
the observable behavior of program pieces. In this work we address the 
question of full abstraction for the family of modern functional logic lan- 
guages, in which functions can be higher order and non-deterministic, 
and where the semantics adopted for non-determinism is call-time choice. 
We show that, with respect to natural notions of observation, any seman- 
tics based on extensional functions is necessarily unsound; in contrast, 
we show that the higher order version of CRWL, a well-known exist- 
ing semantic framework for functional logic programming, based on an 
vntensional view of functions, turns out to be fully abstract and compo- 
sitional. 



1 Introduction 

Developing suitable formal semantics can be of great help in the understanding, 
design and implementation of a programming language, and acts as a guide for 
software development tools like analyzers or partial evaluators. In this sense, full 
abstraction is a highly desirable property, indicating a perfect correspondence 
between the semantics and the behavior of program pieces, according to a given 
criterion of observation. 

The notion of full abstraction was introduced by Plotkin [19] in connection 
to PCF, a simple model of functional programming based on A-calculus. He 
realized that the standard Scott semantics, in which expressions of functional 
types have classical mathematical functions as meanings, lacks full abstraction 
with respect to observing the value obtained in the evaluation of an expression. 
The reason lays in the impossibility of defining the function por (parallel or) 
in PCF. Using this fact one can build two higher order (HO) expressions ei,ea 
denoting two different mathematical functions ipi,ip2, both expecting boolean 
functions as arguments, such that <pi,<p2 only differ when applied to por as 
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argument. Therefore e±,e2 have different Scott semantics but this difference 
cannot be observed. It is usually said that the semantics is too concrete. Notice, 
however, that Scott semantics for PCF is sound, that is, if two expressions have 
the same semantics, they cannot be observably distinguished. Unsoundness of a 
semantics can be considered a flaw, much more severe that being too concrete, 
which is more a weakness than a flaw. 

Full abstraction for PCF was achieved in different technical ways (see e.g. 
[3] ) . But for our purposes it is more interesting to recall that the Scott semantics 
becomes fully abstract if PCF is enriched with the 'missing' por function (see e.g. 
[18]). The mainstream of functional logic programming (FLP, sec [10]) is based 
rather in the theory of term rewriting systems than in A-calculus; a consequence 
is that parallel or can be defined straightforwardly by an overlapping (almost 
orthogonal) rewriting system. So one could think of assigning to FLP languages a 
dcnotational semantics in the FP style. For instance, for a definition like / x = 0, 
one could assign to / the meaning Ax.O. The next step of our discussion is taking 
into account that modern FLP languages like Curry [12] or Toy [16] also permit 
non-confluent and non-terminating programs that define non-deterministic non- 
strict functions. This suggests that the standard semantics should be modified 
in the sense that the meaning of a function would be some kind of set-valued 
function. 

The starting motivation of this paper is that this roadmap cannot be followed 
anymore when non- determinism is combined with HO, at least when considering 
call-time choice [13,9], which is the notion of non-determinism adopted in, e.g., 
Curry or Toy. The following example taken from [15] shows it: 

Example 1. The following program computes with natural numbers represented 
by the constructors and s, and where + is defined as usual. The syntax uses 
HO curried notation. 

gX->0 f -> g f'X->fX 

h X -> s f -> h 

fadd F G X -> (FX) + (G X) fdouble F -> fadd F F 

Here / and /' are non-deterministic functions that are (by definition of /') ex- 
tensionally equivalent. In a set-valued variant of Scott semantics, their common 
denotation would be the function XX.{0,s 0}, or something essentially equiva- 
lent. But this leads to unsoundness of the semantics. To sec why, consider the 
expressions (fdouble f 0) and (fdouble f 0). In Curry or Toy, the possible values 
for (fdouble f 0) are 0, s (s 0), while (fdouble f 0) can be in addition reduced to 
s 0. The operational reason to this situation is that fdouble f is rewritten first 
to fadd ff and then to f + f 0; now, call-time choice enforces that evaluation 
of the two created copies of / (which is an evaluable expression) must be shared. 
In the case of / ' + f 0, since /' is a normal form, the two occurrences of / ' 
evolve independently. We see then that / and /' can be put in a context able 
to distinguish them, implying that any semantics assigning / and /' the same 
denotation is necessarily unsound, and therefore not fully abstract. 



3 



The combination HO + Non- determinism + call-time choice was addressed 
in HOCRWL [7, 8], an extension to HO of CRWL [9], a semantic FO framework 
specifically devised for FLP with call-time choice semantics for non-determinism. 
HOCRWL adopts an intensional view of functions, where different descriptions - 
in the form of HO-patterns- of the same extensional function are distinguished as 
different data. The intensional point of view of HOCRWL was an a priori design 
decision, motivated by the desire of achieving enough power for HO programming 
while avoiding the complexity of higher-order unification of A-terms modulo /3?y, 
followed in other approaches [17, 11]. The issues of soundness or full abstraction 
were not the (explicit nor implicit) concerns of [7, 8]; whether HOCRWL actually 
fulfils those properties or not is exactly the question considered in this paper. As 
we will get positive answers, an anticipated conclusion of our work is that one 
must take into account intensional descriptions of functions as sensible meanings 
of expressions in HO non-deterministic FLP programs, even if one does not want 
to explicitly program with HO-patterns. 

The rest of the paper is organized as follows. Next section recalls some es- 
sential preliminaries about applicative HO rewrite systems and the HOCRWL 
framework. We introduce also some terminology about semantics and extension- 
ality needed for Sect. 3, where we examine soundness and full abstraction with 
respect to reasonable notions of observation based on the result of reductions. 
The section ends with a discussion of the problems encountered when programs 
have extra variables, i.e., variables occuring in right, but not in left-hand sides of 
function defining rules. Finally Sect. 4 summarizes some conclusions and future 
work. 

2 Higher-Order Functional-Logic Programs 
2.1 Expressions, patterns and programs 

We consider function symbols /,<?,... £ FS, constructor symbols c,d, . . . £ CS, 
and variables X, Y, . . . £ V; each h £ FSUCS has an associated arity, ar(h) £ N; 
FS n (resp. CS n ) is the set of function (resp. constructor) symbols with arity 
n. The notation o stands for tuples of any kind of syntactic objects o. The 
set of applicative expressions is defined by Exp 3 e ::= X | h \ (e\ e^) .As 
usual, application is left associative and outer parentheses can be omitted, so 
that ei e2 ... e„ stands for ((. . . (ei e-i) . . .) e n ). The set of variables occurring 
in e is written by var(e). A distinguished set of expressions is that of patterns 
t 1 s £ Pat, defined by: t ::= X | ct\...t n | / t\ . . . t m , where < n < ar(c), < 
m < ar(/). Patterns are irreducible expressions playing the role of values. FO- 
patterns, defined by FOPat 3 t ::= X \ c ti . . . t n (n = ar(c)), correspond to 
FO constructor terms, representing ordinary non-functional data- values. Partial 
applications of symbols h £ FS U CS to other patterns are HO-patterns and can 
be seen as truly data- values representing functions from an intensional point of 
view. Examples of patterns with the signature of Ex. 1 are: 0, s X, s, f, fadd f 
/'. The last three are HO-patterns. Notice that /, fadd f f are not patterns since 
/ is not a pattern (ar(/) = 0). 
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Contexts are expressions with a hole defined as Cntxt 3 C ::= [] C e \ e C. 
Application of C to e (written C[e]) is defined by [ ][e] — e ; (C e')[e] = 
C[e] e' ; [e! C)[e] = e' C[e\. Substitutions 9 £ Subst are finite mappings from 
variables to expressions; [Xi/ei, . . . , X n /e n ] is the substitution which assigns 
ei E Exp to the corresponding J, £ V. We will mostly use pattern-substitutions 
(or simply p-substitutions) PSubst = {6 E Subst \ 6{X) E Pat.MX E V}. 

As usual while describing semantics of non-strict languages, we enlarge the 
signature with a new 0-ary constructor symbol _L, which can be used to build the 
sets Expr^, Pat±, P Subst ± of partial expressions, patterns and p-substitutions 
rcsp. 

A HOCR WTj-program (or simply a program) consists of one or more pro- 
gram rules of the form / t\ . . . t n — > r where / E FS n , (t±,..., t n ) is a linear 
(i.e. variables occur only once) tuple of (maybe HO) patterns and r is any ex- 
pression. Notice that confluence or termination is not required. In the present 
work we restrict ourselves to programs not containing extra variables, i.e., pro- 
grams for which var(r) C var(f t) holds for any program rule. There are tech- 
nical reasons for such limitation (see Sect. 3.2), whose practical impact is on 
the other hand mitigated by known extra- variables elimination techniques [4, 2]. 
HOCR WTj-programs often allow also conditions in the program rules. However, 
programs with conditions can be transformed into equivalent programs without 
conditions; therefore we consider only unconditional rules. 

Some FLP systems, like Curry, do not allow HO-pattcrns in left-hand sides of 
function definitions. We call left-FO programs to these special kind of HOCRWL- 
programs. We remark that all the notions and results in the paper are applicable 
to left-FO programs and we stress the fact that Ex. 1 is one of them. 



2.2 The HOCRWL proof calculus [7] 

The semantics of a program V is determined in HOCRWL by means of a proof 
calculus able to derive reduction statements of the form e -> f, with e 6 Exp± 
and t E Pat±_ , meaning informally that t is (or approximates to) a possible value 
of e, obtained by evaluation of e using V under call-time choice. 

The HOCRWL-prooi calculus is presented in Fig. 1. We write V h hocrwl 
e — > t to express that e — > t is derivable in that calculus using the program V. 
The HOCRWL- denotation of an expression e E Exp± is defined as [e]|/oCfliVL = 
{t E Pat± | V ^hocrwl e —> t}. V and HOCRWL arc frequently omitted in 
those notations. 

Looking at in Ex. 1 we have [/ double f 0] = {0, s (s 0), J_, s J_, s (s A.)} 
and {J double f 0] = {0, s 0, s (s 0), _L, s 1, s (s _L)}. 

We will use the following result stating an important compositionality prop- 
erty of the semantics of T/OCRlFL-expressions: the semantics of a whole ex- 
pression depends only on the semantics of its constituents, in a particular form 
reflecting the idea of call-time choice. 

Theorem 1 (Compositionality of HOCRWL semantics, [15]). For any 

e E Exp x , C E Cntxt, [C[e]] = U te [ e ]M. 
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(B) (RR) x G V 

e — > J. x -> x 

(DC) -=— 1 — — £n — — h £ £, if h ti . . . t m is a partial pattern, m > 

h ei . . .e m -*> h, ti . . .t m 

. ei pi0 . . . e n — > p„6 r6 a\ . . . a m -> t if m > 0, 6 £ PSubst± 

f ei . . . e„ ai . . . a m -> t (/ pi . . . p„ -> r) € P 



Fig. 1. (tfOCWL-calculus) 



The HOCRWL logic is related to several operational notions. In [7] a goal 
solving narrowing calculus was presented and its strong adecuacy to HOCRWL 
shown. The operational semantics of [1] has been also used in many works in 
the field of FLP. Its equivalence with the first order version of HOCRWL was 
stated in [14], and it can be transfered to higher order through the results of 
[15, 1]. The formalization of graph rewriting of [5, 6] has been often used in FLP 
too, and although never formally proved, it is usually considered that it specifies 
the same behaviour. Finally, in [15] a notion of higher order rewriting with local 
bindings called HOlet-rewriting and its lifting to narrowing were proposed, and 
its adequacy to HOCRWL was formally proved. It can be summarized in the 
following result: 

Theorem 2 ([15]). Ve g Exp, t £ Pat, t G {e\ v iff V h e -^ l *t, where 
stands for the reflexive-transitive closure of the HOlet-rewriting relation. 

Therefore, we can use the set of total values computed for an expression in 
HOCRWL as a characterization of the operational behaviour of that expression, 
as it has a strong correspondence, not only with its behaviour under HOlet- 
rcwriting, but also under any of the operational notions metioncd above. 

2.3 Extensionality 

In order to achieve more generality and technical precision wrt. the discussion of 
Ex.1, we introduce here some new terminologies and notations about extensional 
equivalence and related notions that will be used later on. They can be expressed 
in terms of the HOCRWL semantics [_]. 

Definition 1 (Extensional equivalence, extensional semantics). 

(i) Given n > 0, two expressions e,e' £ Expr± are said to be n-extensionally 
equivalent (e ~„ e') iff [e ei . . . e„] = [e' ei...e„], for any ei,...,e„ G 
Expr± . 

(ii) Given n > 0, e € Expr±, the n-extensional semantics of e is defined as: 
\e\ext n =Xti... Xt n . [eh... t n ] (U G Pat ± ). 

We can establish some relationships between these notions: 
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Proposition 1. 

(i) e <~„ e' =>■ e ~ TO e', /or a/Z m > n. 

(ii) e ~„ e' <4> [e ii . . . t n ] = [e' h . . . t n j, for any ti,...,t n G Pat±. 
(Hi) e ~ n e' O {ejextn = [e'] e xt n 

Proof. The proof is easy, thanks to compositionality of [_] (Th. 1). 

(i) Assume e ~ n e', m > n, let ei . . . e m S Expr±. We must prove [e ei . . . e m ] = 
[e' ei . . . e m ]. We reason as follows: 

[e ei . . . e m \ 

[(e ei . . . e„)e„+i . . . e m ] 

Ui£[e ei...e„] P e "+l ■ ■ • e ™l 
Ute[e' ei...e„] I* e «+l • • ■ e ™l 

[(e' ex... e„)e„+i . . . e m ] 
|e' ei . . . e TO ] 

(ii) Another direct use of compositionality 
(hi) Consequence of (i),(ii) and definitions of ~„, [_] e a;t„- 

3 CRWL and Full Abstraction 
3.1 Full Abstraction 

In this section we examine technically soundness and full abstraction of the 
HOCRWL semantics [_] and its extensional variants [_] ea ;t fc - We can anticipate 
a positive answer for [_] and negative for the others. 

Full abstraction depends on a criterion of observability for expressions. In 
constructor based languages, like FLP languages, it is reasonable to observe 
the outcomes of computations, given by constructor forms reached by reduc- 
tion. Here, we can interpret 'constructor form' in a liberal sense, including HO- 
patterns, or in a more restricted sense, only with FO-patterns. This leads to the 
following notions of observation. 

Definition 2 (observations). Let V be a program. We consider the following 
observations: 

- O v : Expr ^ Pat is defined as O v (e) = {t e Pat \V h e -^ l *t} 

- Oj D : Expr h-> FOPat is defined as Oj a (e) = {t E FOPat ?he -^ l *t}{= 
O v (e) n FOPat) 

We remark that, due to the strong correspondence between reduction and 
semantics given by Th. 2, we also have O v (e) = \e\ v C\Pat 1 implying in particular 
p (e) C [e] 7 ' (and similar conditions hold for 0/ ). 

Now we turn to the definition of full abstraction. In programming languages 
like PCF the condition for full abstraction is usually stated as: 



= (by compositionality) 

= (since e -~„ e') 

= (by compositionality) 



(1) 



[e] = [e'J ^ 0{C[e]) = 0(C[e']),for any context C 
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where O is the observation function of interest. Programs do not need to be 
mentioned, because programs and expressions can be identified by contemplat- 
ing the evaluation of e under V as the evaluation of a big A-cxprcssion or big 
Zei-expression embodying V and e. Contexts pose no problems either. In our 
case, since programs are kept different from expressions, some care must be 
taken. It might happen that V has not enough syntactical elements and rules 
to built interesting distinguishing contexts. For instance, if in Ex. 1 we drop the 
definition of f double, and we consider Of D as observation, then we cannot built 
a context that distinguishes / from /'. This would imply that soundness or full 
abstraction would not be intrinsic to the semantics, but would greatly depend 
on the program. What we need is requiring the right part of (1) to hold for all 
contexts that might be obtained by extending P with new auxiliary functions. 
To be more precise, we say that P 1 is a safe extension of (P, e) if P' = P U V", 
where P" does not include defining rules for any function symbol occurring in 
P or e. The following property of HOCRWL regarding safe extensions will be 
crucial for full abstraction. The property is subtler than it appears to be, as 
witnessed by the fact that it fails to hold if programs have extra variables, as 
discussed in Sect. 3.2. 

Lemma 1. \e\ v = \e\ v when P 1 safely extends (P,e). 

Proof. As V C V 1 then \e\ v C \e\ v ' trivially holds, as every HOCRWL-pvoof 
for V h e — > t is also a proof for V' h e — > t. 

On the other hand, to prove the inclusion [e] 73 C [e] 73 let us precisely 
formalize the notion of safe extension. For any program V, we write defs(P) 
for the set of function symbols defined in V (i.e., appearing at the root of some 
left-hand side of a program rule of V); for any expression e, we write FS e for the 
set of function symbols appearing in e; for any program V and rule (I — > r) G V 
we define FS {l ^ r} = FS l UFS r and fs v = \J(i^ r )ev FS (l ^ r) . Then V is a safe 
extension of (V, e) iff V = V W V" such that defs{V") n (FS e U FS V ) = 0. 

Now we will see that for any proof for V' b a — > s if defs(V")DFS a = then 
def ' s{V") Pi FS S — and for any premise a' —o s' appearing in that proof we 
have defs{T")n(FS a ' UFS 3 ') = 0, by induction on the structure of V h a -> s. 
Let us do a case distinction over the rule applied at the root. If it was B then 
the only statement is a — >_L for which the condition holds because FS. 
If it was RR then the only statement is x — > x, but x $ FS. If it was DC 
then we apply the IH over each — > ti, because defs(V") D FS 1,11 ei — em > = 
implies defs(V") D FS ei = for each e,. All that is left is checking that 
defs(V") n FS {h = 0. But defs(V") n FS U = for each U by IH, and 

h G FS [h ei - em) n defs(V") = by hypothesis, so we are done. Finally, for 
OR we apply the IH to — > Pi9 and its premises, as we did in DC. Besides 
/ G FS if ei - e " ai - am) ndefs(P") = by hypothesis, so (/ Pl . . . Pm -+r)eP, 
hence defs(P")nFS^ Pi---Pm^r) _ because V" is a safe extension. Combining 
both facts with the absence of extra variables in program rules we get FS r0 PI 
defs(P") = 0. But FS (f ei - e " 01 - 0m) n defs{P") = by hypothesis, hence 
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FS (re ai ...a m ) n de f s ^p>^ = 0^ t0 which we can apply the IH t0 conc i u de the 
proof. 

Finally, assuming a proof V h e — > t we may apply the property above 
because defs(V") D FS e = 0, as V" is a safe extension. Therefore V" was not 
used in that proof and so it is also a proof for V h e — > t, since T 7 ' = W P". 

We can now define: 

Definition 3 (Full abstraction). 

(a) A semantics is fully abstract wrt O iff for any V and e, e' £ Expr, the 
following two conditions are equivalent: 

(i) 14 V = b'T fa) O v '{C[e]) = O v ' (C[e'\) for any V safely extending 

(V,e), (P,e') and any C built with the signature ofV'. 

(b) A notion weaker than full abstraction is: a semantics is sound wrt O iff the 
condition (i) above implies the condition (ii). 

For extensional semantics, our Ex. 1 (and obvious generalizations to aritics 
k > 1) constitutes a proof of the following negative result: 

Proposition 2. For any k > 0, [-]eKt fc is unsound wrt O, Of . This remains 
true even if programs are restricted to be left-FO. 

This contrast with the following: 

Theorem 3 (Full abstraction). [_] is fully abstract wrt O and Of - 

The proof for this theorem will be based on the compositionality of [_] and 
the following result: 

Lemma 2. Let V be any program. Consider the transformation 1 : Pat±^ — > Pat 
defined by: 

X = X _L = hot h t\ ... t m = h ti ... t m 

where bot is a fresh constant constructor symbol. Consider also the program 
V' = V W V gt , where V gt consists of the following rules defining some fresh 
symbols g s G FS: 

g x U — !> U g± X — > bot 

9(h u ...t m )(h X x . ..X rn ) — » h {g tl Xi) . . . (g tm X m ) 

Then: 

(i) V' is a safe extension of(V,e). 

(ii) f 6 \e\ v iff i G \gt , for any e £ Exp±, t £ Pat± built with the signature 
of P. 
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Proof. It is clear that V is a safe extension as it only defines new rules for fresh 
function symbols. The other equivalence holds by two simple inductions on the 
structure of t. 

Proof (For Theorem 3). First of all we will prove the full abstraction wrt. O. 
We will see that \e\ v = \e'~\ v iff for any safe extension V' of (V, e) and (V, e'), 
for any context C built with the signature of V' we have O v (C[e\) = O v (C[e']). 
Concerning the left to right implication, assume \e\ v = \e'J v and fix some safe 
extension V 1 and some context C built on it. First we will see that O v (C[e]) C 
O v '(C[e'}). Assume some t G O v ' (C[e}), then t G {C[e]\ v ' by definition and Th. 
2. But then 



t g [C[e] 




]F" by Th. 1 


= Ute[e] 




by Lemma 1, as V' is a safe extension 


= Ute[e' 


F [cwr' 


by hypothesis 


= Ute[e' 




by Lemma 1, as V' is a safe extension 


= [C[e']I 




by Th. 1 



But then i G O v (C[e']) by definition and Th. 2. The other inclusion can be 
proved in a similar way. 

Regarding the right to left implication, wc will use the transformation 2 of 
Lemma 2. We can also take the program V' of Lemma 2 which is a safe extension 
of (V, e) and (P, e') as it only defines new rules for fresh function symbols. There- 
fore we can assume O v (C[e\) = O v (C[e']) for any C built on V '. Besides, for 
any t G \e\ v we have t G \gt ej v by Lemma 2, and so t G O 7 ' (gt e) = O 7 ' (g* e') 
by definition, Th. 2 and hypothesis. But then t G \gt e'J v by definition and Th. 
2, and so t 6 \e'\ V by Lemma 2 again. The other inclusion of [e'J in [e] can be 
proved in a similar way. 

Now we will prove the full abstraction wrt. Of . The left to right implication 
can be proved in exactly the same way we did for O. Concerning the other 
implication we modify the transformation 2 of Lemma 2 in the following way: 

h t\ ... t m h m t\ ... t m 

9{h ti ...t m )(h Xi ... X m ) -> hm (g tl Xi) . . . (g tm X m ) 

where h m is a fresh constructor symbol of arity m. Note that then Vi G Patj_ we 
have t G FOP at. Besides it is still easy to prove that for any e G Exp±,t G Pat± 
built with the signature oiV,t£ [ef iff i G \g t ef , where V = V W P 9t , and 
that T 3 ' is a safe extension of V, by a trivial modification of the proof for Lemma 
2. With these tool the proof proceeds exactly like in the one for O, but using 
these new definitions of 2 and gt- 

3.2 Discussion: the case of extra variables 

As pointed in Sect. 2, in this work we assume that our programs do not contain 
extra variables, i.e., var(r) C var(f t) holds for any program rule / t\ . . .t n —t r. 
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This condition is necessary for the full abstraction results to hold, as we can see 
in the following example. 

Example 2. Consider a signature such that FS = {f/l,g/l}, CS = {0/0, 1/0}, 
and the program V = {f X ^ Y X} . Note the extra variable Y in the rule for 
/■ 

Then we have [/ 0]' p = {_L} = [/ if 7 , because any derivation of / — > t 
using (OR) must have the form 

X 



0^0 tp ->t 
V h f -> t OR 

where p can be any pattern (/, g, 0, 1 or _L) and X can be (OR) or (B). In all 
cases the only possible value for t in tp —> t will be _L. A similar reasoning holds 
for / 1. However, for V' = V t±J {g — > 1}, which is a safe extension for (V, f 0) 
and (V, f 1) we can do: 



-> 1 -o 1 
■ g -> 1 

V h / 1 



Oi? 



while for / 1 we can only do: 



1 -» 1 g 1 -*_L 



Hence the context [] and the safe extension V' yield different observations for 
/ and / 1. 

The previous example can be discarded if we assume that we have at least 
one constructor for each arity, or at least for the maximum of the arities of 
function symbols. This is reasonable because it is like having tuples of any arity. 
With this assumption and the previous program and expression we do not have 
[/ a\ v = [J b] v anymore, ascaG [/ a] and c b <G [/ 6], hence the hypothesis 
of the condition for full abstraction fails. 

Nevertheless the following example shows that full abstraction fails even under 
the assumption of having a constructor for each arity. 

Example 3. For V = {/ 1 -> 2, h X / (Y X)} and FS = {f/l,h/l,g/l} 
we have V0 G PSubst±, 1 [(0(F)) 0j v U [(0(F)) lj v , hence \h Qf = {T} = 
\h 1]^. But for V' — V W {g — > 1}, which is a safe extension for (V, h 0) and 
OP, /i 1), we have V h ft -> 2 while 7" h ft 1 > 2. 

The point is that, if extra variables are allowed, for a fixed program V and 
an expression e we cannot ensure that for any safe extension V' for (V, e) it 
holds that \ej v = \ej v ; i.e., Lemma 1 does not hold. We cannot even grant 
that \e\ v = le'] v implies that \ej v = \e'\' p for any safe extension V' ', which 
in fact is what it is needed for full abstraction, and what we have exploited in 
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the (counter-)cxamples above. It is also relevant that both examples are left-FO 
programs, and therefore the problems do not come from the presence of higher 
order patterns in function definitions. 

As a conclusion of this discussion, we contemplate the extension of this work 
to cope with extra variables as a challenging subject of future work. 



4 Conclusions and Future Work 



We have seen that reasoning extensionally in existing FLP languages with HO 
nondetcrministic functions is not valid in general (Ex. 1, Prop. 2). In contrast, 
thinking in intensional functions is not an arbitrary exoticism, but rather an ap- 
propriate point of view for that setting (Th. 3). We stress the fact that adopting 
an intensional view of the meaning of functions is compatible with a disci- 
pline of programming in which programs are restricted to be left-FO, that is, 
the use of HO-patterns in left-hand sides of program rules is forbidden. This 
is the preferred choice by some people in the FLP community, mostly because 
HO-pattcrns in left-hand sides cause some problems to the type system. Our per- 
sonal opinion is the following: since HO-pattcrns appear in the semantics even if 
they are precluded from programs, they could be freely permitted, at least as far 
as they are compatible with the type discipline. There are quite precise works 
[8] pointing out which are the problematic aspects, mainly opacity of patterns. 
Existing systems could incorporate restrictions, so that only type-safe uses of 
HO-patterns are allowed. More work could be done along this line. 

We have seen in Sect. 3.2 how the presence of extra variables in programs de- 
stroys full-abstraction of the HOCRWL semantics. Recovering it for such family 
of programs is an obvious subject of future work. Another very interesting, and 
somehow related matter, is giving variables a more active role in the semantics. 
Certainly, the results in the paper are not restricted to ground expressions, but 
their interest for expressions having variables is limited by the fact that in the 
notions of semantics and observations considered in the paper, variables are im- 
plicitly treated as generic constants. For instance, the expressions e\ = X + X 
and e-i = X + do have the same semantics ([ei]j_ = [e2]j_ = {-L}). Full 
abstraction of ensure that C(C[ei]) = 0(C[e2\) for any context C. This is ok 
as far as one is only interested in possible reductions starting from e\, e^- If this 
is the case, certainly e\ and e2 have equivalent behavior (no successful reduction 
to a pattern can be done with any of them). However, in some sense e\ and 
have different 'meanings', that arc reflected in different behaviors; for instance, 
if ei and &2 are subject to narrowing, or if e\ and e2 are used as right hand sides 
in a program rule. 
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